Privacy Policy

Introduction & Who We Are

This Privacy Policy explains how Aurum Ocean Intelligence Ltd (金海匯智能) ("Aurum Ocean Intelligence", "we", "us", or "our"), a company registered in Hong Kong and the operator of Celestype (celestype.com), collects, uses, discloses, and protects personal data when you use our website and services (the "Service"). Full company registration and registered-office details for Aurum Ocean Intelligence Ltd are published on our Contact page.

This policy applies to everyone who uses Celestype, and is designed to meet the requirements of the EU/UK General Data Protection Regulation (GDPR) as well as other applicable data-protection laws. By using the Service, you acknowledge that your personal data will be processed as described in this policy.

This policy covers personal data only. It does not cover the content of your assessment results or generated reports themselves, which are addressed in our Terms of Service.

What Personal Data We Collect

We collect the following categories of personal data when you interact with Celestype:

Account Data

Your email address, which we use to create and secure your account, sign you in, and send verification codes and service communications. If you choose to sign in with Google instead, we receive the email address and basic profile name your Google account shares with us for the same purpose.

Assessment & Birth Data

Your birth date, birth time, and birth place (at city level — we do not collect your precise present-day location), along with your quiz answers. This is personal data that you choose to provide, personal to you, and it is what we use to generate your birth chart and personality report.

We do not treat birth date, time, and place as a GDPR 'special category' of data (such as health, religious belief, or sexual orientation) — it is ordinary personal data, and we process it on the basis of your consent, as explained in the next section.

Technical & Cookie Data

Your IP address, device and browser information, and the following essential cookies (plus one piece of local browser storage) needed to operate the site — none of these are used for advertising or cross-site tracking:

• fx_token — your sign-in/session token, keeping you logged in.
• fx_uid — your account's internal user ID, used to restore your signed-in state.
• fx_email — your account email, used to restore your signed-in state across visits.
• fx_guest — a persistent anonymous guest identifier, so your in-progress results are not lost if you have not yet created an account.
• fx_quiz_draft — stored locally in your browser (not a cookie sent to our servers) to save your in-progress quiz answers so you can resume later.

Payment Data

When you make a purchase, payment is processed by our third-party payment provider, acting as merchant of record for the transaction. We receive limited order and transaction metadata (such as order ID, amount, and payment status) from them — we do not receive or store your card number or other full payment-instrument details.

How We Use Your Data & Our Legal Basis

We only use personal data for the purposes below, each grounded in a specific legal basis under GDPR Article 6:

• To create and maintain your account and deliver the core features of the Service (signing you in, saving and displaying your results, managing your purchases) — legal basis: performance of a contract with you.
• To generate your birth chart, personality reading, and AI-written report from the birth date, time, and place, and quiz answers, you provide — legal basis: your consent, given when you submit this data. You may withdraw this consent at any time (by not submitting further assessment data, or by deleting your account and associated records); this will not affect readings already generated, but will prevent us from generating new ones.
• To keep the Service secure, prevent fraud and abuse, and operate the essential cookies described above that are necessary for the site to function — legal basis: our legitimate interests in keeping Celestype secure and reliable, balanced against your rights and freedoms.

Third Parties Who Process Data On Our Behalf

We share personal data with the following processors, each acting only on our documented instructions and bound by contractual confidentiality and security obligations:

• ZeptoMail (Zoho) — sends transactional email, including account verification codes and service notifications.
• DigitalOcean — provides the hosting infrastructure, database, and file storage underlying the Service.
• DeepSeek — provides the AI model that generates the written content of your personality report. It receives only a de-identified set of personality-trait data derived from your inputs (see 'Where Your Data Is Stored' for exactly what is and isn't included), never your name, email, or raw birth data. This provider operates in mainland China.
• Our payment provider (merchant of record) — processes your payment; the specific provider is named on the checkout page at the time of purchase.
• Google — provides optional one-tap sign-in, if you choose to use it instead of an email account.

We require each of these processors to implement appropriate technical and organizational safeguards, and we do not sell your personal data to any third party.

Where Your Data Is Stored

Celestype's global service (celestype.com) stores and processes your account data, birth inputs, quiz answers, and generated reports on overseas, non-mainland-China infrastructure. As a deliberate regional isolation measure, your account details and your raw birth data (your birth date, time, and place) are never replicated to, or accessible from, any China-domestic system we operate.

One narrow exception applies to generating the written content of your report. For this step, we send our AI provider (DeepSeek) only a de-identified set of personality-trait data derived from your inputs — such as your gender, typology code, axis scores, and chart placements (zodiac sign and house) — and never your name, email, precise birth date and time, or birth location. This de-identified set cannot on its own identify you. Because this provider operates in mainland China, this specific de-identified data set may be processed there. Your raw birth data, account details, and quiz answers are not part of this transfer and remain on overseas infrastructure.

Because our processors (see the previous section) operate internationally, your data may be transferred to, and processed in, countries other than your country of residence — including the de-identified transfer to mainland China described above. Where such cross-border transfers occur, we rely on appropriate safeguards — such as de-identifying the data before transfer, the processor’s own compliance certifications, and, where applicable, Standard Contractual Clauses — together with the consent you give when you request a report, so your data continues to be protected to a standard consistent with this policy.

How Long We Keep Your Data

We retain your account data (such as your email address) for as long as your account remains active.

We retain your assessment inputs and generated reports until you delete that specific record, or until you close your account — whichever happens first.

Once data is deleted (by your action or account closure), we delete or irreversibly anonymize the corresponding personal data within a reasonable period, except for limited records we must keep to meet legal, tax, or accounting obligations (such as transaction records), which we retain only as long as required by law.

Your Rights

If you are located in the EEA, the UK, or another jurisdiction with similar data-protection laws, you have the following rights in relation to your personal data:

• Access — to obtain a copy of the personal data we hold about you.
• Rectification — to have inaccurate or incomplete personal data corrected.
• Erasure — to request deletion of your personal data, subject to certain legal exceptions.
• Portability / export — to receive your personal data in a structured, commonly used format, or to have it transmitted to another provider.
• Restriction — to request that we limit how we process your personal data in certain circumstances.
• Objection — to object to processing carried out on the basis of our legitimate interests.
• Withdraw consent — to withdraw, at any time, any consent you previously gave for processing (such as generating readings from your birth data).
• Complaint — to lodge a complaint with a data-protection supervisory authority in your country of residence, work, or the place of an alleged infringement.

To exercise any of these rights, email privacy@celestype.com. We will verify your request and respond within 30 days.

Children's Privacy

Celestype is not directed at, and is not intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children under 16.

If you believe a child under 16 has provided us with personal data, please contact privacy@celestype.com and we will take steps to delete that data.

How We Protect Your Data

We use reasonable technical and organizational measures designed to protect personal data, including encryption of data in transit (HTTPS/TLS), access controls that limit which personnel and processors can access personal data, and ongoing review of our security practices.

No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee the absolute security of data you transmit to us.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page and update the effective date above; for material changes, we will provide additional notice, such as an email or an in-app notice.

Your continued use of the Service after an update takes effect constitutes your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, want to know more about how we handle your personal data, or want to exercise any of the rights described above, email privacy@celestype.com. For general inquiries, you can also reach us at support@celestype.com.

This Privacy Policy is issued by Aurum Ocean Intelligence Ltd (金海匯智能), the operator of Celestype, registered in Hong Kong. Full company registration details are published on our Contact page.